ICT Risk Analyst

About the role

Capco, a global technology and business consultancy focused on financial services, is expanding its consulting team in Italy and is hiring an ICT Risk Analyst. The analyst supports the development and maintenance of the ICT and cyber risk management framework, works alongside IT and cybersecurity teams, and prepares dashboards and reports on ICT risk. The role is based in Milan with two days per week on site in a flexible, hybrid setting.

Key responsibilities

• Support the development and maintenance of the ICT and cyber risk management framework, aligned with regulatory requirements and industry standards
• Identify, assess and monitor ICT and cyber risks across systems and processes, and perform risk assessments including RCSA and scenario analysis
• Define, monitor and report KRIs, KPIs and other ICT risk metrics
• Support second line of defense activities within the ERM framework and contribute to the ICT risk appetite framework, including thresholds, limits and escalation mechanisms
• Analyze ICT vulnerabilities and track mitigation and remediation actions
• Prepare dashboards, heatmaps and reports for stakeholders
• Help define and update ICT and cyber risk policies, standards and guidelines
• Collaborate with IT and cybersecurity teams on risk monitoring, incident analysis and response

Required profile

• Bachelor's degree in science, engineering, economics or an IT-related field
• 2-5 years of experience in ICT risk, cyber risk, operational risk or risk and regulatory environments
• Knowledge of ICT risk management frameworks such as ISO 31000, NIST, ISO 27005 or similar
• Understanding of core ICT technologies and cybersecurity domains
• Experience defining risk indicators, metrics and reporting
• Strong analytical skills and strong communication skills with cross-functional stakeholders

Nice to have

• Knowledge of the Digital Operational Resilience Act (DORA)
• Data analytics and dashboarding tools such as Power BI
• Certifications such as CRISC, CISA, CISM or ISO 27001

What we offer

• Minimum gross annual base salary from EUR 29,000, with possible higher offers and a discretionary bonus
• Health coverage, meal vouchers, welfare allowance and access to learning platforms
• A flat, non-hierarchical structure and ongoing learning opportunities